Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: BgEpKIkFArOt+e+txs4d//KNqMbwdfjGrL83sCc1P3c=
Subject key identifier: E5:20:51:B6:AE:4D:21:B6:A7:0D:6A:54:08:7C:76:28:C9:21:3C:68
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 01958BF20CCE567976C9EFBA1F077B469C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 0F6B
Signing time: Wed 12 Mar 2025 20:00:50 +0000
Manifest this update: Wed 12 Mar 2025 20:00:50 +0000
Manifest next update: Thu 13 Mar 2025 20:00:50 +0000
Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: V4GmZbs8HFmO0UMzwve5vSACw6iaYZdLKmUoUBQTgO0=)
2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:0c:ce:56:79:76:c9:ef:ba:1f:07:7b:46:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Mar 12 20:00:50 2025 GMT
Not After : Mar 13 20:00:50 2025 GMT
Subject: CN=e52051b6ae4d21b6a70d6a54087c7628c9213c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:3c:36:1d:cf:68:9a:6b:09:cb:96:7f:39:
05:17:24:63:02:43:1d:02:28:e5:34:a3:11:3d:49:
db:88:19:b5:c7:a7:f9:b4:65:da:79:9a:fc:5b:43:
c1:dc:37:59:b0:42:90:96:97:49:17:62:53:5c:83:
44:65:84:d6:20:85:35:95:e0:df:ef:d2:8a:3d:18:
19:2b:6a:c8:6f:62:f3:e9:5f:56:2f:7b:23:1a:1e:
e7:62:7c:a2:82:16:c8:8b:3d:fd:dc:a8:f6:41:6e:
82:cc:42:2a:ac:4f:5a:da:37:2a:9b:22:a3:62:73:
1c:9f:64:9e:b6:89:c7:c0:65:1d:c8:a1:39:5d:50:
83:ea:51:a8:de:1e:72:50:7c:32:02:2a:e1:98:17:
f0:ec:72:f0:a8:aa:d2:2c:65:27:5f:da:c0:6e:29:
ab:c7:33:bb:ad:2a:ef:90:c2:bd:bd:02:da:e1:8b:
37:84:66:ce:4b:de:8f:e2:0c:ff:01:cd:3f:a1:eb:
21:2a:c3:af:78:9c:c1:6d:e1:12:69:2d:27:d9:8c:
1d:6c:e4:2d:98:cb:20:62:39:a9:38:c6:84:5b:87:
ac:a9:e4:f1:6c:3b:e1:0c:cf:fa:02:6d:e0:d0:c5:
8c:54:9a:1c:04:29:8a:0f:6e:32:50:b3:2f:70:aa:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:51:B6:AE:4D:21:B6:A7:0D:6A:54:08:7C:76:28:C9:21:3C:68
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4f:52:2d:98:6e:7c:d4:55:c8:43:48:9e:51:77:07:bf:3a:
dc:55:e5:73:ab:23:7a:de:ff:ee:4e:b9:ba:88:46:c0:86:50:
bd:86:3e:20:0b:6b:b0:df:eb:4e:ab:6e:52:cc:fa:8e:df:32:
88:7a:ba:22:a5:4e:50:7f:d9:93:e5:a9:93:78:92:5e:1e:78:
79:c3:b0:86:89:3c:ea:1d:eb:07:ba:84:2f:7f:7d:f7:aa:c8:
bd:c3:46:56:6b:84:92:e4:38:4b:79:63:ad:8f:b0:41:43:e4:
1c:df:35:e2:53:27:83:1e:8d:8f:15:82:3a:58:3f:b2:6c:52:
c9:93:0b:51:7a:2b:2b:51:59:fb:9f:52:3b:18:70:35:00:f8:
2d:a0:05:b4:13:2e:b4:4c:ac:86:dc:b2:76:db:84:e0:b5:3a:
0b:64:91:41:c1:8b:cc:32:15:e7:f1:b3:ce:e5:54:d9:dd:29:
1b:2f:bf:0c:c9:27:42:cf:7f:1d:f4:f5:e9:ab:52:11:5c:41:
fb:82:ec:99:47:9c:75:a6:b4:98:3f:8f:2a:65:32:f8:85:45:
18:a6:2c:d5:93:26:10:73:d9:3e:1c:b9:e3:ba:db:26:69:e0:
68:ea:39:51:a9:09:ea:a6:91:0f:42:43:2e:ef:cc:1d:6d:aa:
c4:65:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:51 2025 by rpki-client